v21’s avatarv21’s Twitter Archive—№ 74,533

          1. …in reply to @lorenschmidt
            @lorenschmidt I will say that I'm surprised this works!
        1. …in reply to @v21
          @lorenschmidt sorry, that wasn't very helpful - I assumed this wouldn't work because the same domain policy for file:// urls generally assumes that all paths should be treated as if they have a different origin
      1. …in reply to @v21
        @lorenschmidt some stuff is exempt from those rules, for historical reasons - image files (tho you can't inspect the pixels, just display them) and JS files. but it's a narrow window to fit through.
    1. …in reply to @v21
      @lorenschmidt but... if it works, it works. generally, tho, the problem with this kind of stuff is not whether you're creating a security hole, but whether you can get around the security rules.
  1. …in reply to @v21
    @lorenschmidt (this is why my designed-to-work-on-localhost system loads all of it's data from a js import that just contains "var data = [big blob of json]" rather than loading an actual .json file)